5.4
Medium
CVE-2021-38928 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which…
Description
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling B2B Integrator Standard Edition 6.0 | 6.0.0.0 → < 6.1.2.1 | 6.1.2.1 |
Other CVEs of Sterling B2B Integrator Standard Edition
The 21 CVEs of Sterling B2B Integrator Standard Edition →
CVE-2024-56338
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 is vulnerable to…
4.8
Medium
CVE-2024-52905
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 could disclose…
2.7
Low
CVE-2023-50309
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2023-32340
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting
4.6
Medium